Jan Orel b8a7145194 M #-: Run ovirtapi under Puma instead of Apache/Passenger ...

The oVirt API server no longer runs under Apache/Passenger but as a
dedicated opennebula-ovirtapi.service on top of Puma (from
opennebula-rubygems), listening on ports 80/443 as oneadmin with
CAP_NET_BIND_SERVICE:

  - share/pkgs/services/systemd/opennebula-ovirtapi.service
  - etc/ovirtapi-puma.rb: Puma configuration (threads, binds, TLS cert),
    installed to /etc/one
  - config.ru: the HTTP to HTTPS redirect (except for the PKI resource)
    that the Apache vhost used to do is now a Rack middleware
  - logs go to /var/log/one/ovirtapi.log, logrotate entry added

The PStore databases are opened thread safe, Puma serves requests from
multiple threads (Passenger used one process per request).

Apache/Passenger only files (apache/, bin/, scripts/configure_apache.sh)
are dropped and config/ is renamed to etc/. Certificate generation is
unchanged.

2026-10-26 17:28:48 +01:00

..

systemd

M #-: Run ovirtapi under Puma instead of Apache/Passenger

2026-10-26 17:28:48 +01:00